Cybex combines an open device agent, reusable blueprints, policy inheritance and controlled rollouts to make Linux desktops manageable across schools, governments and companies.
A central management system talks to a signed agent on every device. Policies and blueprints describe the desired state; the agent reconciles to it and reports back; every change lands in the audit trail.
A signed Cybex agent runs on each managed device. It is open source, so security teams can verify exactly what it collects and what it changes — trust comes from inspection, not promises.
Configure a reference device or VM, let the agent snapshot the relevant configuration, and Cybex generates or updates a versioned blueprint — reviewable, reusable across groups, and rolled out under control.
Reference device or VM, set up by hand.
Agent captures the declarative state.
A versioned blueprint, ready to review.
Assign to groups of devices.
Review, then ship in stages.
Policy inherits from the broadest layer to the narrowest. The same model works for schools, companies and governments — only the contents differ. Select a layer to see what it controls.
Publish to a pilot group, watch fleet health, then advance — or roll back. Scroll to deploy lab-workstation@r12 across all 223 devices.
The control plane gives security teams the evidence they need: what's deployed, what changed, and who changed it — without overclaiming certifications Cybex doesn't hold.
Cybex Cloud is a fully managed service, run for you in European datacenters — there's no software for you to host, patch or operate. And standardizing on open Linux means no proprietary-OS lock-in.
Cybex focuses on doing Linux device management properly before spreading thin. Here's what's available today and where it's heading.
Desktops and laptops, built declarative-first on NixOS — the initial focus and where Cybex is most capable today.
Chromebook support is a possible future direction, not a commitment for today. We won't promise a platform before it's real.